Search
“Rails”
More pages from the web
71–75 of 1,399-
cosine.org
Cosine Jeremiah and his Musings
home about comic ruby livejournal avltree my business Cosine Jeremiah and his Musings Life and Ruby and Security April 10th, 2010 Rails, Django, and Just-Barely-Enough CSRF Protection This week I found what I thought was a bug in Rails 2.3: it does not check the anti-CSRF authenticity token for AJAX requests. Due to years of experience with Rails I knew that this was not the previous behavior I have come to expect, so I dug around and learned that this behavior was intentionally changed some
-
erlend.oftedal.no/blog
Insomnia and the Hole in the Universe
comments (not for humans) Insomnia and the Hole in the Universe [Security] Web framework HTML escaping to mitigate XSS August 4, 2011 - 21:43 CEST Recently we see frameworks altering behaviour in order to mitigate XSS. Ruby on Rails 3, Play Framework and ASP.NET MVC 3 all do HTML escaping by default for the standard output (, ${SomeVariable} and @SomeVariable). While I applaude the frameworks for taking this step (and this is certainly a step in the right
-
hi.im/christiankisala
Hi, I'm Christian Kisala
Hi, Im Create your Hi, I'm page or Login Christian Kisala Aspiring Gentleman Scholar Trying to figure things out, living in Northern NJ, working in NYC. My Networks Twitter Facebook Youtube Flickr MySpace LinkedIn Blog Blog LastFm My Tags Fairmont My Networks LastFm (ckvibes) Twitter (ckvibes) Flickr (ckvibes) Youtube (ckv1b35) Blog Support Privacy Policy Terms of Service ©2009 Hi, I'm. All Rights Reserved. Made by Koombea for Rails Rumble
-
jonkruger.com/blog
Jon Kruger?s Blog
Skip to content Skip to search - Accesskey = s Jon Kruger Better, faster, cheaper Home About Me TDD Boot Camp Contact About Me I am an independent software developer in Columbus, OH, doing things like Ruby on Rails, .NET, Agile, TDD, and whatever else I can find that will help develop high quality software faster and cheaper. This blog is my story of striving to become a better developer every day. Follow me on... Send me an email! Categories .NET Agile Architecture ASP.NET MVC AutoHotKey BDD
-
jroller.com/rmcmahon
Richard McMahon's Weblog
Richard McMahon's Weblog Taking it a day at a time... All | General | Java | Groovy | WebDev | Rails | Mobile Main | Next page » Dec6 Why it sucks to be an in house programmer Comments [0] Over the past few days Joel has published a 3 part piece on a talk he delivered to the Yale Computer Science Department earlier last month. Part 2 really resonated with me. He gives 3 reasons why being an in-house developer sucks. Here's a taster: The key point about in-house development is that once